Recovering a 37-byte flag by reconstructing and inverting an anti-debug-aware Xbyak JIT verifier
Decrypting an 18-byte flag payload by reversing a position-dependent XOR stream derived from a fixed 16-byte key
Combining malloc-failure undefined behavior and signedness bugs to obtain NULL-based absolute memory access and code execution
Navigating a height-128 2-isogeny volcano by lifting both endpoints to its unique CM crater
Extracting embedded bit-vector puzzles from a Next.js bundle, solving them with Z3, and rebuilding the flag keystream
Carving an embedded compiled AppleScript and inverting its bytecode-level character transform to recover the hidden payload
Recovering a 150-character AES-CBC secret through UTF-8 and JSON response oracles under a strict decoding barrier
Recovering xorshift128 state from encoded audio tones and removing the PRNG mask to reconstruct the flag
Forcing RSA factor recovery to fail by choosing primes with matching small-base 2-adic residue behavior
![[SECCON CTF 14] Crown Flash writeup](/_astro/seccon14.CPpgPmZa_tkyJ0.webp)